@naturalcycles/nodejs-lib
Version:
Standard library for Node.js
62 lines (61 loc) • 2.15 kB
JavaScript
#!/usr/bin/env node
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const yargs = require("yargs");
const colors_1 = require("../colors");
const script_1 = require("../script");
const secrets_decrypt_util_1 = require("../secret/secrets-decrypt.util");
(0, script_1.runScript)(() => {
const { dir, file, encKey, del, jsonMode } = getDecryptCLIOptions();
(0, secrets_decrypt_util_1.secretsDecrypt)(dir, file, encKey, del, jsonMode);
});
function getDecryptCLIOptions() {
require('dotenv').config();
let { dir, file, encKey, encKeyVar, del, jsonMode } = yargs.options({
dir: {
type: 'array',
desc: 'Directory with secrets. Can be many',
// demandOption: true,
default: './secret',
},
file: {
type: 'string',
desc: 'Single file to decrypt. Useful in jsonMode',
},
encKey: {
type: 'string',
desc: 'Encryption key',
// demandOption: true,
// default: process.env.SECRET_ENCRYPTION_KEY!,
},
encKeyVar: {
type: 'string',
desc: 'Env variable name to get `encKey` from.',
default: 'SECRET_ENCRYPTION_KEY',
},
// algorithm: {
// type: 'string',
// default: 'aes-256-cbc',
// },
del: {
type: 'boolean',
desc: 'Delete source files after encryption/decryption. Be careful!',
},
jsonMode: {
type: 'boolean',
desc: 'JSON mode. Encrypts only json values, not the whole file',
default: false,
},
}).argv;
if (!encKey) {
encKey = process.env[encKeyVar];
if (encKey) {
console.log(`using encKey from env.${(0, colors_1.dimGrey)(encKeyVar)}`);
}
else {
throw new Error(`encKey is required. Can be provided as --encKey or env.SECRET_ENCRYPTION_KEY (see readme.md)`);
}
}
// `as any` because @types/yargs can't handle string[] type properly
return { dir: dir, file, encKey, del, jsonMode };
}